secnetops.com
http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt CVE-2003-1051
IBM DB2 - 'db2start' Format String Arbitrary Code Execution
Record summary
CVE-2003-1051 has a selected CVSS score of 7.2; EIP currently links 3 catalogued exploits.
Description
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBIBM DB2 - 'db2start' Format String Arbitrary Code ExecutionExploitDB exploitby SNOSoftNot analyzed1 file
ExploitDBIBM DB2 - 'db2stop' Format String Arbitrary Code ExecutionExploitDB exploitby SNOSoftNot analyzed1 file
ExploitDBIBM DB2 - 'db2govd' Format String Arbitrary Code ExecutionExploitDB exploitby SNOSoftNot analyzed1 file
References
520031108 SRT2003-11-06-0710 - IBM DB2 Multiple local security issuesmailing list
http://www.securityfocus.com/archive/1/343804 8989vdb entry
http://www.securityfocus.com/bid/8989 db2-multiple-binaries-bo(13633)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13633 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1051